{"id":18942700,"url":"https://github.com/martinvigo/voicemailautomator","last_synced_at":"2025-08-19T22:32:03.704Z","repository":{"id":81621647,"uuid":"143341522","full_name":"martinvigo/voicemailautomator","owner":"martinvigo","description":"A tool that serves as a Proof of Concept for the research I presented at DEF CON 26, \"Compromising online accounts by cracking voicemail systems\"","archived":false,"fork":false,"pushed_at":"2023-11-13T21:31:17.000Z","size":10,"stargazers_count":154,"open_issues_count":4,"forks_count":53,"subscribers_count":13,"default_branch":"master","last_synced_at":"2024-12-10T07:10:56.891Z","etag":null,"topics":["2fa","hacking","password-reset","voicemail"],"latest_commit_sha":null,"homepage":"https://www.martinvigo.com/voicemailcracker","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/martinvigo.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2018-08-02T20:23:17.000Z","updated_at":"2024-12-01T16:45:33.000Z","dependencies_parsed_at":null,"dependency_job_id":"0798ec08-df94-499a-b632-9a36788f8070","html_url":"https://github.com/martinvigo/voicemailautomator","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/martinvigo%2Fvoicemailautomator","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/martinvigo%2Fvoicemailautomator/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/martinvigo%2Fvoicemailautomator/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/martinvigo%2Fvoicemailautomator/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/martinvigo","download_url":"https://codeload.github.com/martinvigo/voicemailautomator/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":230374116,"owners_count":18216041,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["2fa","hacking","password-reset","voicemail"],"created_at":"2024-11-08T12:33:58.334Z","updated_at":"2024-12-19T04:06:29.166Z","avatar_url":"https://github.com/martinvigo.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# voicemailautomator\n\nvoicemailautomator is a tool that serves as a Proof of Concept for the research I presented at DEF CON 26, \"Compromising online accounts by cracking voicemail systems\".\n\nFor details and demos please check: [https://www.martinvigo.com/voicemailcracker](https://www.martinvigo.com/voicemailcracker)\n\n## Basic info\n\nvoicemailautomator supports two actions:\n* \"message\" - retrieves and records the newest message in the voicemail system. It returns a URL with the recording.\n* \"greeting\" - changes the greeting message to specific DTMF tones\n\nIt uses webhooks to obtain information about the ongoing calls and act accordingly. It starts a Webserver on localhost:8080 and uses localhost.me service to reach the machine running the script.\n\n## Setup\nYou will need a funded [Twilio account](https://www.twilio.com/), setup [TwiML bins](https://www.twilio.com/blog/2017/11/twiml-bins-a-serverless-and-codeless-way-to-try-twilio.html) and configure [localtunnel.me](localtunnel.me) to accept Webhooks. Check the \"Twilio setup\" section in the script and add the missing information \n\n```\naccount_sid = \"\" # Obtain from Twilio\nauth_token = \"\" # Obtain from Twilio\ntwimlPayloadChangeGreeting = \"\" # \u003c?xml version=\"1.0\" encoding=\"UTF-8\"?\u003e\u003cResponse\u003e\u003cPause length=\"10\"/\u003e\u003cHangup/\u003e\u003c/Response\u003e\ntwimlPayloadChangeGetNewestMessage = \"\" # \u003c?xml version=\"1.0\" encoding=\"UTF-8\"?\u003e\u003cResponse\u003e\u003cPause length=\"10\"/\u003e\u003cHangup/\u003e\u003c/Response\u003e\nstatus_callback_url = \"\" # Obtain from localtunnel.me\n```\n\n## Usage\n```\npython voicemailcracker.py message --victimnumber 5555555555 --carrier tmobile --callerid 4444444444 --backdoornumber 3333333333 --pin 0000\n```\n```\npython voicemailcracker.py greeting --victimnumber 5555555555 --carrier tmobile --callerid 4444444444 --backdoornumber 3333333333 --pin 0000 --payload 1234\n```\n\n## Demo videos\n##### Bruteforcing a voicemail PIN with voicemailcracker\n[![Bruteforcing a voicemail PIN with voicemailcracker](https://img.youtube.com/vi/Z9kO4VmN1FM/0.jpg)](https://www.youtube.com/watch?v=Z9kO4VmN1FM)\n##### Compromising Signal with voicemailcracker\n[![Compromising Signal with voicemailcracker](https://img.youtube.com/vi/5tlWIxSthow/0.jpg)](https://www.youtube.com/watch?v=5tlWIxSthow)\n##### Compromising Paypal with voicemailcracker\n[![Compromising Paypal with voicemailcracker](https://img.youtube.com/vi/itEVmcirta0/0.jpg)](https://www.youtube.com/watch?v=itEVmcirta0)\n\n## Tool presentation at DEF CON 26\n[![Tool presentation at DEF CON 26](https://img.youtube.com/vi/ZpZbTPYB3cU/0.jpg)](https://www.youtube.com/watch?v=ZpZbTPYB3cU)\n\n## Authors\n\nMartin Vigo - @martin_vigo - [martinvigo.com](https://www.martinvigo.com)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmartinvigo%2Fvoicemailautomator","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmartinvigo%2Fvoicemailautomator","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmartinvigo%2Fvoicemailautomator/lists"}